CVE Daily

CVE-2024-27780

Multiple Improper Neutralization of Input During Web Page Generation ('Cross-sit...

Low CVSS 2.2

Overview

Multiple Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerabilities [CWE-79] in FortiSIEM 7.1 all versions, 7.0 all versions, 6.7 all versions incident page may allow an authenticated attacker to perform a cross-site scripting attack via crafted HTTP requests.

CWE: CWE-79 Published: 2025-02-11T17:15:21.850
Risk analysis

This vulnerability is rated 🟢 LOW.

  • CVSS: 2.2 (LOW)
  • Detected tags: xss (tag impact: MODERATE)

Recommended actions:

  • Apply context-aware output encoding.
  • Enable Content-Security-Policy and HttpOnly/SameSite cookies.

Recommended tools

Tags